PT-2023-25760 · Adm · Adm

Publicado 2023-08-17 · Atualizado 2023-08-23 · CVE-2023-3698

Positive Technologies (AI Summary)

CVSS v3.1

8.5

Alta

Vetor base

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ADM versions 4.0.6.RIS1 through 4.1.0 ADM versions 4.2.2.RI61 and below

Description The printer service fails to adequately handle user input, allowing remote unauthorized users to navigate beyond the intended directory structure and delete files.

Recommendations For ADM versions 4.0.6.RIS1 through 4.1.0, update to a version above 4.1.0 to resolve the issue. For ADM versions 4.2.2.RI61 and below, update to a version above 4.2.2.RI61 to resolve the issue. As a temporary workaround, consider restricting access to the printer service to minimize the risk of exploitation.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-3698

Produtos afetados

Adm

Referências · 6

• https://twitter.com/cracbot/status/1692416118097690872 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-3698 · Aviso do Fabricante
• https://asustor.com/security/security_advisory_detail?id=28 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-3698 · Nota de Segurança
• https://t.me/cibsecurity/68745 · Publicação no Telegram
• https://t.me/cvenotify/56728 · Publicação no Telegram